Access control and loggingRole-based access, and every access logged.
Security
Security and datasovereignty, by design.
SOC 2 Type II and ISO 27001 certified. Your data is hosted and processed in region, on-premises, hybrid or in the cloud.
Compliance and certifications
SOC 2 Type II
Certified. Controls published in our trust centre.
ISO 27001
Certified for information security management.
GDPR
Listed in our trust centre. Data stays in region.
HIPAA
Listed in our trust centre.
Practices
How we secure your data
Infrastructure
How our systems are built
We deploy on-premises, hybrid or in the cloud, with hosting and processing kept in-region. Network connections are limited, and access is checked against a role and recorded.
Security and governance
Found a security issue?
Tell us before anyone else finds out.
We take reports from independent researchers seriously. Send us the details through our contact page and the team will follow up.
Report a vulnerability
Which security certifications do you hold?
CNTXT AI holds SOC 2 Type II and ISO 27001. GDPR and HIPAA are listed in our trust centre at cntxt.trust.site, with the controls behind them.
Where is our data hosted and processed?
In region. Deployments can be configured to meet regional data-residency requirements such as the UAE and Saudi PDPL.
Can you deploy on our own infrastructure?
Yes. We deploy on-premises, hybrid or in the cloud, and hosting and processing can be kept in region.
Where can I see your controls and policies?
In our trust centre at cntxt.trust.site, which lists the controls across product, data, network, app, endpoint and corporate security.
Need documentation for procurement?
Our certifications and policies are published in the trust centre, and the team can share the security documentation procurement needs.
